commits an offence and shall, upon conviction, be liable to a fine of K10,000,000 and imprisonment for seven years. (2) For the proper performance of his functions and powers under this Act, a cyber inspector may be accompanied by a police officer. PART IV - CYBERSECURITY STANDARDS AND ENFORCEMENT Cybersecurity standards 16. - (1) The Authority shall develop, establish and adopt standards in the cybersecurity space for governance and risk management and any other relevant area that the Authority may determine in accordance with international best practices. (2) The Authority shall publish on its website the standards developed and promote their adoption by the public and private sectors. (3) The Authority shall take the necessary measures to enforce the cybersecurity standards adopted and monitor compliance by the public and private sectors. (4) A person who fails to comply with the cybersecurity standards is liable to pay to the Authority the administrative penalty specified in the Schedule. Certificate of compliance 17. A cyber inspector shall issue a certificate of compliance where he is satisfied that the standards set by the Authority from time to time have been met. PART V - CRITICAL INFORMATION INFRASTRUCTURE Designation of critical information infrastructure 18. - (1) The Minister may, on the advice of the Authority, designate a computer system or computer network as a critical information infrastructure if the Minister considers that the computer system or computer network is essential for – (a) national security, or (b) the economic and social wellbeing of citizens. 17

Select target paragraph3